791671c25f0e32279b184ba3c55f9750_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

791671c25f0e32279b184ba3c55f9750_NeikiAnalytics.exe
Size

300KB
MD5

791671c25f0e32279b184ba3c55f9750
SHA1

a54de0cb393ec5cf12304d7cb014f856d81ea097
SHA256

1d96a47f2d88a2971fd64ee7a2e5898749296becdd0f33068192e35182aaac1c
SHA512

c7d41a258f1e69e09c083497cd7a6dd06fe799e9e6b01fe9f639b7d1d7fdb9affe3f8e0cb3bedf8a25fb2328ab92175d8ef488d68b7793047361e560a29e6e40
SSDEEP

3072:Bvplby1pQ/4e7C8KW5AkcQNCd/SwJJ7CV8h4ObzvEApEfVc+nAcxM2U+ABY9KOJ8:JUpQQ5BW5ABrpDzvOc+BM2U+5Y7BYu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
791671c25f0e32279b184ba3c55f9750_NeikiAnalytics.exe

Files

791671c25f0e32279b184ba3c55f9750_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ